CVE-2006-0794: help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid...

Security readout for executives and security teams

This CVE describes an information disclosure issue in V-webmail 1.6.2. A remote attacker may be able to make help.php reveal the server installation path by sending invalid parameters. That does not prove system compromise, but it can expose environment details useful for later attacks. The record warns that provenance is unknown and details come only from third-party information. Exposure is likely limited to organizations still running V-webmail 1.6.2, especially if the webmail interface or help.php is reachable from untrusted networks. The bundle lists no broader product family, platform, or version range evidence. Low to time-bounded verification priority. This is a 2006 legacy path-disclosure report with incomplete evidence, but exposed legacy webmail can create avoidable attack surface. Confirm whether the product exists in the environment and remove or restrict it if found. Mitigation focus: Identify any V-webmail 1.6.2 deployments in asset inventories.; Check vendor or archival project guidance for available fixes or upgrade paths.; Restrict public access to legacy webmail if business use remains required..

Prepared

Jun 29, 2026, 14:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.